From 7aa2717d065be86dab2a443f56964a488cd6d48b Mon Sep 17 00:00:00 2001
From: Stefan Saraev <stefan@saraev.ca>
Date: Wed, 15 Aug 2012 20:16:30 +0300
Subject: [PATCH 1/3] xbmc-addon-settings: add option to disable ssh password
 auth

---
 .../source/resources/language/English/strings.xml                | 1 +
 .../xbmc-addon-settings/source/resources/settings.xml            | 1 +
 2 files changed, 2 insertions(+)

diff --git a/packages/mediacenter/xbmc-addon-settings/source/resources/language/English/strings.xml b/packages/mediacenter/xbmc-addon-settings/source/resources/language/English/strings.xml
index 321f8f17c4..6102fe98fe 100644
--- a/packages/mediacenter/xbmc-addon-settings/source/resources/language/English/strings.xml
+++ b/packages/mediacenter/xbmc-addon-settings/source/resources/language/English/strings.xml
@@ -42,4 +42,5 @@
 
 	<string id="5020">SSH</string>
 	<string id="5021">Start ssh server at boot</string>
+	<string id="5022">Disable password authentication</string>
 </strings>
diff --git a/packages/mediacenter/xbmc-addon-settings/source/resources/settings.xml b/packages/mediacenter/xbmc-addon-settings/source/resources/settings.xml
index 6387300912..9c7d7fff7b 100644
--- a/packages/mediacenter/xbmc-addon-settings/source/resources/settings.xml
+++ b/packages/mediacenter/xbmc-addon-settings/source/resources/settings.xml
@@ -73,5 +73,6 @@
 		<setting label="5020" type="lsep"/>
 		<setting type="sep" />
 		<setting id="SSHD_START" type="bool" label="5021" default="false" />
+		<setting id="SSHD_DISABLE_PW_AUTH" type="bool" label="5022" default="false" />
     </category>
 </settings>

From bf4c3f76d7113047683cd0257b432c5826d51f1e Mon Sep 17 00:00:00 2001
From: Stefan Saraev <stefan@saraev.ca>
Date: Wed, 15 Aug 2012 20:16:49 +0300
Subject: [PATCH 2/3] openssh: disable passwotdh auth if set in
 os.openelec.settings

---
 packages/network/openssh/init.d/51_sshd | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/packages/network/openssh/init.d/51_sshd b/packages/network/openssh/init.d/51_sshd
index d8effb1e9c..63c5cf5518 100644
--- a/packages/network/openssh/init.d/51_sshd
+++ b/packages/network/openssh/init.d/51_sshd
@@ -81,10 +81,16 @@
         cp /etc/ssh/known_hosts $HOME/.ssh
       fi
 
+    # Check if password authentication is disabled
+      OPTIONS=""
+
+      if [ "$SSHD_DISABLE_PW_AUTH" == "true" ] ; then
+        OPTIONS="-o 'PasswordAuthentication no'"
+      fi
       progress "Starting SSH Server"
 
       mkdir -p /var/empty
       chmod -R 600 /var/empty
-      $SSHD
+      eval $SSHD $OPTIONS
     fi
   )&

From 6798ed16ae01831fc7fdd229726733fbb3d68cab Mon Sep 17 00:00:00 2001
From: Stefan Saraev <stefan@saraev.ca>
Date: Wed, 15 Aug 2012 20:27:03 +0300
Subject: [PATCH 3/3] xbmc-addon-settings: fix 'disable password auth'
 visibility

---
 .../xbmc-addon-settings/source/resources/settings.xml           | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/mediacenter/xbmc-addon-settings/source/resources/settings.xml b/packages/mediacenter/xbmc-addon-settings/source/resources/settings.xml
index 9c7d7fff7b..7305bc4979 100644
--- a/packages/mediacenter/xbmc-addon-settings/source/resources/settings.xml
+++ b/packages/mediacenter/xbmc-addon-settings/source/resources/settings.xml
@@ -73,6 +73,6 @@
 		<setting label="5020" type="lsep"/>
 		<setting type="sep" />
 		<setting id="SSHD_START" type="bool" label="5021" default="false" />
-		<setting id="SSHD_DISABLE_PW_AUTH" type="bool" label="5022" default="false" />
+		<setting id="SSHD_DISABLE_PW_AUTH" type="bool" label="5022" default="false" visible="eq(-1,true)"/>
     </category>
 </settings>